Browse CVEs

MEDIUM 5.4 CVE-2025-5567 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-url' DOM element attri… Shortcodes Ultimate 7.4.1+ Fix from $1,6002025-07-04 MEDIUM 5.4 CVE-2024-8500 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in all ve… Shortcodes Ultimate 7.3.0+ Fix from $1,6002024-10-23 MEDIUM 5.4 CVE-2024-6766 The shortcodes-ultimate-pro WordPress plugin before 7.2.1 does not validate and escape some of its shortcode attributes before outputting them back i… Shortcodes Ultimate 7.2.1+ Fix from $1,6002024-08-06 MEDIUM 5.4 CVE-2024-4821 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_lightbox shortco… Shortcodes Ultimate 7.1.7+ Fix from $1,6002024-06-05 MEDIUM 5.4 CVE-2024-4553 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_members' shortc… Shortcodes Ultimate 7.1.6+ Fix from $1,6002024-05-21 MEDIUM 6.1 CVE-2024-3548 The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.2 does not sanitise and escape a parameter before outputting it back in th… Shortcodes Ultimate 7.1.2+ Fix from $1,6002024-05-15 MEDIUM 5.4 CVE-2024-3550 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all… Shortcodes Ultimate 7.1.3+ Fix from $1,6002024-05-02 MEDIUM 6.3 CVE-2024-3188 The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.0 does not validate and escape some of its shortcode attributes before out… Shortcodes Ultimate 7.1.0+ Fix from $1,6002024-04-26 MEDIUM 5.4 CVE-2024-2583 The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.0.5 does not properly escape some of its shortcodes attributes before they a… Shortcodes Ultimate 7.0.5+ Fix from $1,6002024-04-13 MEDIUM 5.4 CVE-2024-0792 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all… Shortcodes Ultimate 7.0.2+ Fix from $1,6002024-02-29 MEDIUM 5.4 CVE-2024-1808 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_qrcode' shortco… Shortcodes Ultimate 7.0.4+ Fix from $1,6002024-02-28 MEDIUM 5.4 CVE-2024-1510 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_tooltip shortcod… Shortcodes Ultimate 7.0.3+ Fix from $1,6002024-02-20 MEDIUM 5.4 CVE-2023-6488 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_button', 'su_me… Shortcodes Ultimate after 7.0.0 Fix from $1,6002023-12-19 MEDIUM 5.4 CVE-2023-6225 The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_meta shortcode c… Shortcodes Ultimate 7.0.0+ Fix from $1,6002023-11-28 MEDIUM 6.5 CVE-2023-23800 Server-Side Request Forgery (SSRF) vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin —… Shortcodes Ultimate after 5.12.6 Fix from $1,6002023-11-13 MEDIUM 5.4 CVE-2023-25040 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vova Anokhin WordPress Shortcodes Plugin — Shortcodes Ultimate plugin <= 5.12… Shortcodes Ultimate 5.12.7+ Fix from $1,6002023-03-30 MEDIUM 6.5 CVE-2023-0890 The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not ensure that posts to be displayed via some shortcodes a… Shortcodes Ultimate 5.12.8+ Fix from $1,6002023-03-20 MEDIUM 6.5 CVE-2023-0911 The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user sho… Shortcodes Ultimate 5.12.8+ Fix from $1,6002023-03-20 HIGH 8.8 CVE-2022-41136 Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Shortcodes Ultimate plugin <= 5.12… Shortcodes Ultimate after 5.12.0 Fix from $1,9502022-11-08 MEDIUM 5.4 CVE-2021-24525 The Shortcodes Ultimate WordPress plugin before 5.10.2 allows users with Contributor roles to perform stored XSS via shortcode attributes. Note: the … Shortcodes Ultimate 5.10.2+ Fix from $1,6002021-09-20 CRITICAL 9.8 CVE-2017-18580EPSS 12% The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode. Shortcodes Ultimate 5.0.1+ Fix from $2,3002019-08-22 MEDIUM 5.0 CVE-2017-2245 Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vect… Shortcodes Ultimate after 4.9.9 Fix from $1,6002017-07-07